Vulnerability in Belchior Foundry Vcard

CVE-2004-1828

Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php.

EPSS: 0.024 (82.4th percentile) — read the EPSS interpretation.

Affected products

Belchior_foundry Vcard — versions 2.8, 2.9
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)